CVE-2008-2640

Publicada em 18 jun 2008 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.8%

Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to (1) client-side-detection-with-history/history/historyFrame.html, (2) express-installation-with-history/history/historyFrame.html, or (3) no-player-detection-with-history/history/historyFrame.html in templates/html-templates/. NOTE: Firefox 2.0 and possibly other browsers prevent exploitation.

Produtos afetados

n/a · n/a

Referências

http://blog.watchfire.com/wfblog/2008/06/javascript-code.html http://secunia.com/advisories/30746 http://securitytracker.com/id?1020301 https://exchange.xforce.ibmcloud.com/vulnerabilities/43150 http://www.adobe.com/support/security/bulletins/apsb08-14.html http://www.securityfocus.com/bid/29778 http://www.vupen.com/english/advisories/2008/1862